Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/3f57fca9-06dd-3728-9f37-d97b6a30f7ea.roa
File:                     3f57fca9-06dd-3728-9f37-d97b6a30f7ea.roa (raw, json)
Hash identifier:          3xW+I+HUhdiS7MHQTPIKRwKauGHgCgDFYrEyH0IaB2s=
Subject key identifier:   1C:40:8A:D2:28:9E:B8:CD:F3:2A:68:D5:60:DF:AC:37:06:12:47:42
Certificate issuer:       /CN=eb5e041e-98b3-4dff-827b-03e1387393cf
Certificate serial:       010D0C9F43285845909DE5B63277D33DF48E2FC0
Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/3f57fca9-06dd-3728-9f37-d97b6a30f7ea.roa
Signing time:             Tue 16 Apr 2024 13:00:33 +0000
ROA not before:           Tue 16 Apr 2024 13:00:33 +0000
ROA not after:            Mon 15 Jul 2024 13:00:33 +0000
asID:                     12189
IP address blocks:        2607:6004:100::/40 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:90:9d:e5:b6:32:77:d3:3d:f4:8e:2f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf
        Validity
            Not Before: Apr 16 13:00:33 2024 GMT
            Not After : Jul 15 13:00:33 2024 GMT
        Subject: CN=c2319c64-af9a-41b3-b70f-e705bb73d155
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:46:42:53:0d:47:74:76:31:58:e7:42:4a:60:
                    a3:2a:92:35:3e:ca:f6:b2:d0:cc:8d:ac:15:f7:17:
                    4a:98:b0:58:cd:4e:a7:e5:73:24:6d:37:27:2b:d4:
                    6f:0e:e4:e9:cc:89:7b:7f:5a:11:30:8e:01:43:ef:
                    ed:37:1c:1d:d3:d5:66:03:73:f5:86:d9:95:bd:b0:
                    87:cb:0c:5b:87:5c:ed:c0:14:1b:a6:58:09:76:1b:
                    17:16:fb:7b:97:83:7f:98:a5:81:9c:1b:94:65:ca:
                    a4:09:5d:58:e3:3d:a4:95:16:cb:3a:47:20:da:eb:
                    71:4e:ec:61:dd:0c:03:04:7b:92:17:f1:a0:03:31:
                    bf:a5:69:05:36:73:7b:d2:81:78:e1:a1:d3:a8:c6:
                    91:6c:d5:b1:7a:de:79:61:05:b6:6f:29:53:be:c3:
                    cc:70:00:9d:cc:ae:6b:44:5b:8d:b5:77:84:24:9e:
                    b9:29:b4:5c:5d:e7:2c:4b:af:3e:61:f4:ad:e6:56:
                    6a:ac:1e:a2:50:bf:0b:e6:84:86:11:2b:55:fa:d1:
                    60:d7:c4:92:a7:4d:bb:e1:cc:11:fd:a3:3e:43:46:
                    ed:80:3a:33:dd:5e:ce:25:f9:34:c7:35:e0:d3:4e:
                    e2:95:b1:5f:02:ad:19:ce:22:fe:f8:f4:a6:e4:5d:
                    4f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:40:8A:D2:28:9E:B8:CD:F3:2A:68:D5:60:DF:AC:37:06:12:47:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/3f57fca9-06dd-3728-9f37-d97b6a30f7ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl

            X509v3 Authority Key Identifier:
                keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6004:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:c0:f2:35:34:cc:f3:da:4d:3f:fe:98:18:26:9e:22:ea:46:
         59:1d:93:92:72:fb:54:32:3b:e5:d9:41:b1:f2:49:26:99:f0:
         d6:c2:4e:3d:45:29:dd:3c:c4:b2:ab:c5:bb:30:cd:b9:ee:48:
         5d:22:74:a3:02:6e:d1:56:99:f4:6b:26:09:08:8b:51:6b:6a:
         2b:e6:a9:5b:b8:45:ed:55:39:cf:7c:b1:26:54:32:71:29:21:
         03:fd:fa:ef:94:d8:f6:52:28:2a:bd:35:aa:6d:49:25:00:be:
         ec:17:0f:33:cd:c1:72:d6:17:e2:52:db:4d:7b:39:b6:ad:1f:
         56:fd:e2:9a:bc:af:c9:e6:7a:2a:af:a9:8c:32:4a:d9:c6:15:
         b0:11:c4:e8:47:ba:8b:a2:e8:03:2a:72:30:8f:85:bf:a5:e7:
         bf:21:f3:31:ba:94:76:fd:90:7d:8e:b2:01:50:19:f1:7d:90:
         49:a1:35:35:86:94:93:92:1e:29:fe:e7:37:fb:46:21:cd:91:
         cb:86:d5:de:d7:d2:26:04:37:27:9f:f2:fb:95:75:97:d5:31:
         8a:68:07:6d:a9:05:16:8c:00:68:7e:c4:ae:70:67:1a:dc:07:
         27:1a:b1:22:16:c3:a0:e3:02:3b:7d:b1:6e:33:f6:06:42:b7:
         22:33:98:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 21:20:37 2024 by rpki-client on console-ams.rpki-client.org